Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LSsvRRIswEYu9XriTlNJIay2xsE.roa
File: LSsvRRIswEYu9XriTlNJIay2xsE.roa (raw, json)
Hash identifier: JqrSV/9/HCyGYwFkJuvXzT9AbdNiApOEMxTP3KrGth4=
Subject key identifier: 2D:2B:2F:45:12:2C:C0:46:2E:F5:7A:E2:4E:53:49:21:AC:B6:C6:C1
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LSsvRRIswEYu9XriTlNJIay2xsE.roa
Signing time: Thu 15 Sep 2022 02:41:24 +0000
ROA not before: Thu 15 Sep 2022 02:41:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 120.107.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2D2B2F45122CC0462EF57AE24E534921ACB6C6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:5c:52:6a:6c:73:6c:8b:d7:9e:46:da:57:
a6:26:6c:5f:cf:fb:75:59:6d:7d:b9:3a:b5:ea:56:
3b:c0:37:aa:5b:ad:52:ca:bd:8d:b5:a1:40:36:5f:
ef:93:46:03:50:7c:24:f8:c4:e0:6c:d0:75:1d:b6:
33:d2:33:f7:ff:f4:4f:ea:ef:5b:f8:97:61:5c:40:
2b:92:ba:89:d2:a5:8c:08:6e:b6:6d:58:e3:c0:58:
07:27:39:7b:e0:fa:3f:1b:88:51:43:a4:58:24:d2:
7b:f3:54:3c:1f:55:3a:a4:5c:56:c0:92:7b:3f:5b:
4c:e4:fc:6b:ac:70:db:5e:1b:b9:cd:47:d6:38:c2:
36:d4:27:ed:b0:38:64:5b:95:57:05:27:99:8a:d6:
e9:ec:28:5a:21:b8:4c:57:fb:ce:00:fe:2e:72:bf:
04:8d:7c:a1:9f:b5:14:5b:17:e7:e5:88:d1:7d:a4:
84:f5:38:a1:60:4e:ec:a2:c3:e6:0f:5a:94:8c:44:
43:fe:73:1b:5d:4b:39:44:b2:06:28:53:57:d5:57:
c0:f9:65:1f:2d:22:95:8a:30:f4:18:0a:25:12:dd:
3f:fe:37:b5:06:55:cf:84:9e:14:7c:8a:5f:0e:0b:
53:f8:15:ca:4b:79:98:7a:e9:8d:71:6e:06:aa:97:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:2F:45:12:2C:C0:46:2E:F5:7A:E2:4E:53:49:21:AC:B6:C6:C1
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LSsvRRIswEYu9XriTlNJIay2xsE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:6e:11:1f:89:6a:41:f8:26:45:b7:e0:9d:62:34:05:16:d9:
f6:67:e7:8e:4d:e5:2c:53:73:ba:2e:a3:14:ac:6b:f9:f8:c8:
87:46:63:ef:7b:9c:a8:93:9c:4f:27:34:46:33:bb:86:74:32:
67:c2:b8:42:70:13:53:24:f1:ac:fd:82:0c:c1:16:a3:e0:5a:
d9:f6:97:c7:a3:7f:52:87:03:80:61:f3:7d:b4:35:79:5a:b5:
4a:dd:14:64:7d:91:9f:8c:ea:15:4a:7f:6e:71:91:e4:41:9b:
79:6b:8e:f2:2a:ad:bd:d3:e5:ec:15:7e:5d:3e:c7:a5:13:d7:
f7:b8:6e:1c:93:09:f7:06:66:db:ed:12:52:eb:fe:f1:2a:31:
10:d0:4f:1b:42:9c:c4:fd:e1:7e:66:a3:6a:c4:50:b8:40:84:
47:aa:3a:d2:bb:a6:49:cb:ec:5a:33:ba:f7:56:95:0b:fc:88:
b4:49:06:ab:80:99:5a:7f:25:8a:71:63:2e:e9:cd:03:8b:59:
35:11:28:10:c8:a1:e6:cf:27:9b:4f:9e:96:86:1b:17:74:9f:
be:77:34:2a:89:78:3c:96:b3:98:89:47:e2:fa:1f:cb:16:d9:
d6:39:dc:fd:0e:57:ee:c0:5f:31:60:fb:74:dd:40:35:6a:70:
69:71:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org